4.12.32

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.32-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
- gcp-ovn-upgrade-4.12-minor Succeeded periodic-ci-openshift-release-master-ci-4.12-upgrade-from-stable-4.11-e2e-gcp-ovn-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.14, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.30, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.39, 4.11.40, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.45, 4.12.10, 4.12.11, 4.12.14, 4.12.15, 4.12.16, 4.12.17, 4.12.18, 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.4, 4.12.5, 4.12.6, 4.12.7, 4.12.8, 4.12.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.12.12

Created: 2023-09-01 12:18:54 +0000 UTC

Image Digest: sha256:008c933f9d2b49721d6729c1e558f3f0c91e8368201d33469dcd5bda5cf7d333

Release 4.12.32 was created from registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2023-08-31-143618

Components

Kubernetes upgraded from 1.25.7 to 1.25.12
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202303241612-0 to 412.86.202308300700-0 (diff)

Rebuilt images without code change

agent-installer-node-agent git a7aa6000 sha256:b2e92f6cd94864402b2d4b3c545b60ffcb76322142f4f59918db5bf03c8c987d
alibaba-cloud-controller-manager git 1959de0e sha256:747592b0a768748ecbecaff139d82a41aff9289b9278dc6c7cbbbb506cdcb295
alibaba-cloud-csi-driver git 664d8cb0 sha256:cd0d3c2ca8d9f85658dfddc46268006c7633f67296d90cb308a8225eac36a826
alibaba-disk-csi-driver-operator git e324a71c sha256:8bae936271cd1fa65747173d35adeb2257d5b5d5a40a60e271f5121a87549d30
alibaba-machine-controllers git b9287c05 sha256:8404b0df328b26218fe293cf06e83041ab3a96e0d04354dc5e018d6061232859
aws-cloud-controller-manager git 7fb891f4 sha256:c1c37962e8ad4e78a5776136ec44571bc1c4efa80423415d997883d435e7a4ea
aws-machine-controllers git b82e889d sha256:8f3b31c120b61f1441ed8839a343d08311577b5148c3765f31244030c6bdac43
aws-pod-identity-webhook git 6197630b sha256:7f8ac41dc869f15b6166477529b0ed3663c2ffe23d651f53dfd39399a2cc0ae7
azure-cluster-api-controllers git d1d4f770 sha256:fe08c05724fa6e2d0f502751ba5e12e822648e3bece1fee50939d61f07d7fdd1
azure-disk-csi-driver git ba105788 sha256:51f8a515fb44a94084e491539ba0613b50357bae1ac097307327902e448b570c
azure-disk-csi-driver-operator git 6b1d69d2 sha256:893ba8dc86c3e8922fda21080bd2b521aab11e00e11a51a2b15b5616d738dd8f
azure-file-csi-driver git 746fab2b sha256:f17e8742c46a01887fe53b1052fef683fba9dbab97b9c695bbf83b32f5eab907
azure-file-csi-driver-operator git 0a02fa02 sha256:2b3c495c86bd5969729521bc053a1ec9007f5a69e89f1663509ea1bbcf0f5041
baremetal-machine-controllers git 63dcaf1e sha256:59550e3394a647ee35e0e8b833fff7ef66a5b05ef3759ae88103bf1422d9d81b
cluster-autoscaler git 6ab8e62b sha256:e69bc89d7cdc9658fbc82d0cda1371a8ee0206672d170c2aaea449e6a5d7515e
cluster-autoscaler-operator git 8b232255 sha256:3965b9abdc3809c0ec41282df7af4de265472d926b8f3f409cd196a5bada7b4c
cluster-capi-controllers git f9c215c4 sha256:942f1ff28415fa78e9b9841fbe139dda4c03ec073adfbdba072840ae84801167
cluster-capi-operator git 3bfe36aa sha256:3ad44af6fdbf3d38d5b507849fca4e1a8cadab62b4023904e932679601d198b5
cluster-config-operator git 4c6e171d sha256:92f8af594a9861ae7da5c7bff21cfae3c4ba8d26fce5642623d263d443b29096
cluster-dns-operator git 1c136fe3 sha256:4f7c736101e4b0fee2edd2c16b308f0d5cc44c9266345234c88be75fc9c7834e
cluster-image-registry-operator git e9a895af sha256:95210b6687bc3edbf465dfffc0d4ffeb63d04d777df9b5c5a8b2a6798602c889
cluster-kube-cluster-api-operator git 7bb05468 sha256:108ef6222b6ebca61781f70a7bbbc49bdc425fdf0c938dc51f748625d44ea54a
cluster-kube-storage-version-migrator-operator git 12d050ab sha256:e57dd1113a19ee1a6c53fd7c1e58edbe993aaa1efd998c8beb16636c2c372d5c
cluster-machine-approver git 60081982 sha256:eab41de7b258b40f627c2de690e0caf474f179d15cccce6d71fabb785da16a38
cluster-openshift-controller-manager-operator git d1915d13 sha256:bc3ca6ab381ac36eb77eb6229bab0c57c365e8d67152799a8781a9fbae80f485
cluster-platform-operators-manager git d40fae81 sha256:1431d71f1e24e59f68e24507301b64313f0842b8a5faee1af6d87a039096772e
cluster-update-keys git 2796e173 sha256:aec9bf20e6acc5f88a76272b8f1289240280073361249c6a4a44facb73909750
configmap-reloader git e4d9170e sha256:7e7000141ef2dda06357f11bd55b74b025bb2e5cd222456261cd8d22435116c6
container-networking-plugins git 6d237727 sha256:e62220fc18a90e38498e3f14dd23e70d5b5780175ef6fa012bbb2f4f07f7c9e3
coredns git 9aaa7e0a sha256:eae627e8a4597ee3f5f6e607174c67e6ced8751127ce8c0306c41a9ecf12ce98
csi-driver-manila-operator git af25a1f4 sha256:9a5346384e7283b67446aa54dea3817e9e7b01af77393ebec40c72cec7239e73
csi-driver-nfs git d9099257 sha256:c6df830907b645275a44eb5996c50ee1813951a4730b8d58626a40e97013e9b8
csi-driver-shared-resource git 20cffc04 sha256:9f2e9409eb1161f1b4ad4f8563f4fe19f15e8000b47fb06212ca3b4651c2bb87
csi-driver-shared-resource-operator git 3201431c sha256:cf5c1e4ba3c4f7b36d9dc802834a71c187fdbfe46f2acc4a7da7b486656e6ac6
csi-driver-shared-resource-webhook git 20cffc04 sha256:bca1a7c88d63e0821b82a3f2487871b953cf30eb61479d5e9d8ae18146d890ea
csi-external-attacher git 6945eef8 sha256:6bf08108744c13c8746dc54e762073f4911f792641556072bede2a49f2d5e0b4
csi-external-provisioner git 140851f6 sha256:1f673596f24bc1a67d7efb7ad7266395ff43f50ab8fad7eff1ad902f8ed5f318
csi-external-resizer git 239d751f sha256:b5b8c8222ce938a3ab41142d58b2a50affbb02974ffa35f1f0f991e630ede078
csi-external-snapshotter git 7e232566 sha256:58fc1b1dbb635c238e96e657965e4b8bb3a201a7b9515375d6e024208ae529c2
csi-node-driver-registrar git 805d5ac2 sha256:767114278bdaa9e94b6aa5eb1f3581d2527c9911876769533a59c78ee7804c06
csi-snapshot-controller git 7e232566 sha256:397018478aa13b82675a66b9a6dce3814a21a6f04709d18ee333bd332ad0e483
csi-snapshot-validation-webhook git 7e232566 sha256:856a4cfc0e4fdcaec2837ed3302ba2eb91746966d3ec60d65d3386e0fb1a790e
docker-registry git 95e39bf0 sha256:b452e152899b872fa178f7e04cc7b5bda67e42b5cec818002cb2b111204de573
driver-toolkit git 6e5c04c0 sha256:14fe9d9e47a1100808be11475d07a0ce904c625a94961ce96c7337e670caec93
egress-router-cni git a92e4157 sha256:409969131abbe3c4b7b07ec3e80832f8c48edbb0c5c9d52c38594a53ae2f8d01
gcp-cloud-controller-manager git 8d208a7f sha256:3b3ed0cee0dc8d3c3ceeb05b02bc0a851cd1ca8635c9764260721817adb4ee47
gcp-cluster-api-controllers git eea0586c sha256:3ab96ee02b1c10ee89634c2dae207457cdaf703235348b0ff193bda94eb217c3
gcp-pd-csi-driver git 223d8464 sha256:8505d372ab26d060d356e3a9493381c7daa8a7527690e240782dbfcd8cc1a908
gcp-pd-csi-driver-operator git 020aeb67 sha256:40f434902725654dc2975fb3ea5aec06b51e3e1dea99d4acd50f799a0d04a11e
ibm-cloud-controller-manager git e5f25fc6 sha256:acdfcbffcc74edf2b5a4ed9c1ad49f8893d554376ab67471352d2a6715e232a1
ibm-vpc-block-csi-driver git e0f7a3bc sha256:115e8583606a432669284e1606df2eaea090ed89cca0d6d02c63ebe0242b5534
ibm-vpc-block-csi-driver-operator git f70fccea sha256:b6b22cd1976ebb15b3645e3a8cfdd920ab41e982c81219c74e1ae89a1bcc481d
ibm-vpc-node-label-updater git 737d00c9 sha256:91cde76307d069638ddc87168abda591e92a31276b984c65efc744da3b3863f9
ibmcloud-cluster-api-controllers git c1304c80 sha256:470e12c1c477419e3cdb8a05d1505c662dd53e14e5c69049928fcd5b8d426f8b
ibmcloud-machine-controllers git 31a67dac sha256:6cac8a1dd28f3053eb9f05c6b2966fd284c33f0deb0bd2929cc03d20cc058b9a
k8s-prometheus-adapter git 987e5da8 sha256:51567dc452ed4d80b70102a82d2de15d4b4c63d7e9ec0eaad6b908893502672f
keepalived-ipfailover git 7e8a0105 sha256:90e33b37d307cabe73b938fa61c7a813c9c8643456212ddf533544cea5c35a02
kube-state-metrics git 9a1bf9b8 sha256:34e24c52a2fa719828bba031f09bf27c35a64d60a87011024589549fb52c0fac
kube-storage-version-migrator git 596745ce sha256:f5d4826329ffeec43abef7a00320824c1ec30b15bb10fc976cafcae953254362
kubevirt-cloud-controller-manager git a19615cd sha256:d123a968d5b42e6e8f20ea10fffccf6960a7c0867c943187f7348679a78bc617
kubevirt-csi-driver git f407c8a7 sha256:ab2bac06627c9d7253408579dc3859ce0bb7b7d78df7e0c44c072af641fc2459
libvirt-machine-controllers git a2882f7a sha256:795da7ec696773907774c8057702c0093e4730783849ec52dadff33a6fee0a62
machine-image-customization-controller git 27777d0e sha256:19dfef8409953e3fbc3961fe74eb6888bedadfadf971356b5f866ab8b0ed7fb5
machine-os-content sha256:90a6d51415c0c001d36825df56aeefee1d006e4867d6f00c16e440eb30e1f698
machine-os-images git 566bf595 sha256:2acdf74aeb3a23ed782cab9ed3d7b204d862a1ce4bb7caf5a2e074a40012b841
multus-networkpolicy git 421718ab sha256:4e5ca25c980c4ecbbb2513b7ae432b58a6e003d24f00fa19326717d1f1d4185c
must-gather git 5fd21761 sha256:62a865e00c09e1aa67ecdaa918307bca6aedf119a71179f5ab17d4ff627781b9
network-tools git c76613c7 sha256:15a1ec15bd7b9f426170de6061f8d21527e258290005cd803b2fb498c54c4bf0
nutanix-machine-controllers git 25aea2d4 sha256:462dad7528838ba0e0c4f3835974c0e550799699ae9dde2b8dbe6fe6828284d2
oauth-apiserver git cfafdccf sha256:208b1cb96cc782a1fc30c736e020976491ddd7edb13ab806d382691318b2b867
oauth-proxy git 03e5b13b sha256:60d50ef27f59f4bf4e4d648a71fb9c4424f0b12c9a33d7dd3e44cd94e34f6327
olm-rukpak git 1b52bfeb sha256:7a680c854a27454ce0d6762d347bea8842ddaa420a5d644a2b84781aa41f6234
openshift-apiserver git 635ed5cc sha256:5b328538c67fab98d905cc8022e8f3ae048cf850397038765e71711d7657e439
openshift-controller-manager git b6528f9e sha256:ce8aec0af3d9611d21a8b59de6ba2e3efcc1f58ca2b47f85c2e3ee6f0cb64386
openshift-state-metrics git 4c711c74 sha256:9f656a064755c535a571dc684c990eff4b3c131b97cb07e373f0192f487a4ebe
openstack-cinder-csi-driver-operator git 308a62d8 sha256:021d1303a4871a25659c8227753891dda161fba75824e46ec0b7a6080e4d2982
openstack-machine-controllers git 8bd9c35f sha256:327d9048cb384b642df7a40b0213e44a9fb658a73b4610f4fa54f6a9820dbd87
ovirt-csi-driver git 64d58fb5 sha256:85fd0aa16b641897bcb5afdd32c731d7a4f6045790d274ddb98eb7f83c51f547
ovirt-csi-driver-operator git feb14fbb sha256:7070a36c6c243579e5ef961bfea590585831d03d410e184c851d9d6e9a5e9d89
ovirt-machine-controllers git 03e8cb50 sha256:8f10303b9d5772d3a1ad63b11193c98c87dcea6edecdc2b75c4f4aa025bf1bdd
powervs-block-csi-driver git 5eb2b132 sha256:3caa2fca09d2f1b7f8eca0eb094791c82e6622122226dfd5b2b45c1eb005e662
powervs-block-csi-driver-operator git b4da8bcc sha256:6409e607c8b9ab2b4bc367f08de9d4d7f10fd07804c1782173f1b899bb13e357
powervs-cloud-controller-manager git d8ddc10c sha256:abdb654499e0376209cb65e797d7233b96d3fb6351f9e86a34f6afcc80045c79
powervs-machine-controllers git 3f498f79 sha256:81d2631f55a3954547d8e72761f0239dcbc5e1c8131c3674cf9fcf19db20e3d4
prom-label-proxy git b1907888 sha256:e5c6ee55c3e136b554e75bdced268642168e16c90ab8a6b9602e382f0025056f
prometheus git c749fdb4 sha256:497bbd09e5858464be6ba23648b73a67c71632485f63612e661858d25bf87bda
prometheus-alertmanager git 86b18354 sha256:1a68b33c27da9ad699f72a0ca16307275972fc688e3c0e96e21bd3ef2429416e
prometheus-config-reloader git 57e7c574 sha256:457eced11df2896f4e097d1b59d9c0c736cb11df1147336142530777f686ae27
prometheus-node-exporter git af2f49ca sha256:9bd931cd9ace200ba5ec4826f68b8bc68e0c080b7f155c357646d60c1e035bf0
prometheus-operator git 57e7c574 sha256:b9d580d8db74892aa3e0687ac78f4fcc346957c71042b38602ee5c348a3610ff
prometheus-operator-admission-webhook git 57e7c574 sha256:b690959b5a3177f51fdd2f9f88941fed90fa295be6c24c8e464066276a1c7f1b
rhel-coreos-8 sha256:ee58e881ff6aed01b506e6d7564b7f8c23734a498a499b586631830f06f08d9b
rhel-coreos-8-extensions sha256:c10de37e08f39c815e827a366640abcd3f341a47c46582da177f6a642b2c5119
service-ca-operator git 299b7097 sha256:1ec5d7a8d052f00a6ead8054b981d3bc8d085c3b5245a749c8a766fc612add19
telemeter git fc631fcb sha256:d547921596fbd1c16c628a9d03c97e6b8d26466b963cd86492ed0893020ce644
vsphere-cloud-controller-manager git e993e31f sha256:5f8f6e60e7a27ca148fc956c36475264fc344c0bffadea64af8817d1f14bd78a
vsphere-cluster-api-controllers git 5c261b3b sha256:44540a15868dd645b2badc4b1c569fe42140651a3159aaece948b357f291d70d

agent-installer-api-server

MGMT-15150: Use same installer binary for all platform types (#5347) #5347
OCPBUGS-13356: Fix ‘vendor’ root device hint evaluation (#5206) #5206
OCPBUGS-13529: Support by-path root device hints (#5214) #5214
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-7149: IPv6 multinode spoke no moving from rebooting/configuring stage Update the mcs log regex (#631) #631
Full changelog

apiserver-network-proxy

OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
Full changelog

aws-cluster-api-controllers

OCPBUGS-15548: Pass right SGs for IsExternallyManaged on creation #469
Full changelog

aws-ebs-csi-driver

OCPBUGS-14281: Volume unmount repeats after successful unmount, preventing pod delete #226
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-13721: assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets #230
4.12: OCPBUGS-10646: 4.12 hypershift set control plane #208
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-17159: Increase service idle max timeout to 100 minutes #82
Full changelog

azure-machine-controllers

OCPBUGS-17960: Machine Actuator should not set metadata.name #71
OCPBUGS-17221: Add user defined Tags to NIC Azure resources #69
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-16778: bump RHCOS 4.12 bootimage metadata to 412.86.202308081039-0 #7420
OCPBUGS-17467: Allow override of networkType #7406
OCPBUGS-17174: Set AdditionalTrustBundle in override when mirroring not enabled #7386
OCPBUGS-16382: azure: skip LB creation when not needed #7342
OCPBUGS-14868: Shorten SNO installation duration by releasing CPC lease #7242
OCPBUGS-14495: Support /dev/disk/by-path root device hints #7227
OCPBUGS-16151: ic: azure: validate diskTypes in AzureStack #7331
OCPBUGS-11199: azure: upi: use Image Gallery in ARM templates #7054
OCPBUGS-13940: bump RHCOS 4.12 bootimage metadata to 412.86.202306132230-0 #7249
OCPBUGS-14664: Shorten SNO installation duration by releasing CVO lease #7235
OCPBUGS-7400: Check for AWS STS installation before trying to get all IAM Roles #7175
OCPBUGS-13819: Bootstrap on aws should have same metadata service type as on other nodes #7196
OCPBUGS-12202: Relax vsphere, nutanix VIP validation #7116
OCPBUGS-7551: vSphere - ignore all bootstrap disk changes #6860
OCPBUGS-14014: Do not always output warning msg when releaseImage is digest #7202
OCPBUGS-13052: bump RHCOS 4.12 bootimage metadata #7164
OCPBUGS-12956: openstack: Add netcat to the Installer image #7148
OCPBUGS-12749: [Alibaba] update the bandwidth value of EIP #7131
OCPBUGS-7400: Check for AWS STS installation before trying to get all IAM Roles #7141
OCPBUGS-11360: Use 100 GB as minimum disk size in validations #7065
Full changelog

baremetal-operator

OCPBUGS-17703: Trigger reconcile on Secret change #298
OCPBUGS-17459: Set minimum TLS version for webhook to 1.2 #297
OCPBUGS-14188: Deleting unmanaged BMH get stuck fix #283
OCPBUGS-13530: Support /dev/disk/by-path root device hints #278
OCPBUGS-12175: Revert live-iso validation #269
Full changelog

baremetal-runtimecfg

OCPBUGS-17715: Don’t render config with incomplete unicast peer list #268
OCPBUGS-15315: Use machine-config state instead of comparing roles #262
OCPBUGS-12805: Make nested dual stack VIP configs respect EnableUnicast #240
OCPBUGS-13405: Verify kubelet version in upgrade check #249
OCPBUGS-11145: fix isUpgradeStillRunning() #232
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-16173: Add tls-server-name when property exists in kubeconfig #1507
OCPBUGS-1283: Bump golang.org/x dependencies #1421
OCPBUGS-16056: mcs cert: account for environments that use IP directly #1501
OCPBUGS-16194: reboot: set ignition version to 3.1 #1509
handle the error case of node retrieval while waiting for reboot #1485
bring some cert rotation helpers back into 4.12 [fix unit-tests] #1478
OCPBUGS-14647: [release-4.12] Do not set master node selector if there’s no masters #1366
OCPBUGS-14236: Remove closed centos7 registry from newapp unit tests #1434
Full changelog

cloud-credential-operator

OCPBUGS-13739: Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #539
OCPBUGS-11707: ccoctl: Enable public anon read access to default OIDC S3 bucket #529
Full changelog

cloud-network-config-controller

OCPBUGS-16325: Azure: Handle already existing IP configurations #117
OCPBUGS-14717: increase GCP egress ip capacity to 100 from 10 #114
OCPBUGS-13802: sync CloudPrivateIpConfig when node is missing #112
OCPBUGS-13183: pull project name from subnet uri #108
Full changelog

cluster-authentication-operator

OCPBUGS-13346: dont log jwt tokens #622
Full changelog

cluster-baremetal-operator

OCPBUGS-16169: use proxying for inspector in addition to ironic #349
OCPBUGS-15715: Limit role binding to openshift-machine-api namespace #347
Full changelog

cluster-bootstrap

OCPBUGS-14386: Update dependencies and image #91
Add API team to the OWNERS #97
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-13862: add separate upgradeable condition for the sync controller #254
OCPBUGS-13188: update config sync controller to add upgrade status #251
OCPBUGS-7898: add a check for nutanix cloud conf map #239
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-14960: Check ProviderSpec before generating MachineInfo #216
OCPBUGS-15198: Surface cpms vs machines diff #219
OCPBUGS-13943: fix double machine creation on stale cache #210
OCPBUGS-12440: Prioritise machine mapping over alphabetical mapping #204
OCPBUGS-11692: E2E periodics test timeout failures improvement #190
OCPBUGS-8503: machine’s node must be ready for CPMS machine to be ready + fixes #193
OCPBUGS-11521: Use PlatformStatus instead of PlatformSpec to determine platform #188
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-10646: Hypershift: set Deployment properties #148
OCPBUGS-8374: [4.12] remove cluster-admin role. #143
Full changelog

cluster-etcd-operator

OCPBUGS-17808: reset snapshot default counts to avoid file already lo… #1100
OCPBUGS-12473: Fix Flake TestAttemptToScaleDown/scale_down_only_by_one_machine_at_a_time #1046
Full changelog

cluster-ingress-operator

OCPBUGS-13049: bump controller-runtime to fix the multi namespace cache indexing #922
OCPBUGS-15467: Add missing AWS permission for ListTagsForResources #954
OCPBUGS-16620: Deflake TestRouterCompressionOperation #963
OCPBUGS-16621: Fix TestClientTLS flakes #964
OCPBUGS-15644: Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #959
OCPBUGS-14454, OCPBUGS-14455: Handle mTLS CRLs, and fix accidental CRL duplication #941
OCPBUGS-12464: Target metrics port by name in internal service #910
OCPBUGS-3517: Ingress controller should not have affinity policy in single-replica clusters #857
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-17139: make webhook connection failure a warning in log #1533
OCPBUGS-13346: dont log jwt tokens #1524
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-6789: Enforce PSA when techpreview is enabled #694
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-14652: disable debug pporf with unauthenticated port for 4.12 #481
Full changelog

cluster-monitoring-operator

OCPBUGS-17125: backport metrics collection profiles selector logic to prevent users from double scraping when they upgrade from 4.12 to 4.13 #2047
OCPBUGS-16028: Add the trusted CA bundle in UWM Prometheus pods #2042
OCPBUGS-15473: Limit the value of GOMAXPROCS on node-exporter to 4 #2023
OCPBUGS-13008: Add build number to vcenter version information #1965
OCPBUGS-12727: backport OCPBUGS-5353 to 4.12 #1955
OCPBUGS-11508: add startup probe for prometheus-adapter #1940
OCPBUGS-11623: node-exporter: disable btrfs collector #1944
OCPBUGS-11404: jsonnet: Add prometheus container in UWM #1935
Full changelog

cluster-network-operator

OCPBUGS-17656: prevent creation of multiple cni-sysctl-allowlist-ds pods #1948
OCPBUGS-11547: Hypershift: Add RollingUpdate parameters to multus-admission-controller #1775
OCPBUGS-16142: fix reconciliation process of the allowlist controller #1891
[release-4.12 ] OCPBUGS-11217:use annotation daemonset to update hybrid overlay #1764
OCPBUGS-15588: Add release version annotation to whereabouts-reconciler #1856
OCPBUGS-13891: [release-4.12] HyperShift: Support HostedControlPlane node selector #1816
OCPBUGS-13067: Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler [backport 4.12] #1829
OCPBUGS-6061: Update github.com/Masterminds/sprig to v3 #1689
OCPBUGS-13013: AUTH: update cluster-reader to include k8s.ovn.org #1799
OCPBUGS-13067: Whereabouts should implement the reconciliation controller [backport 4.12] #1801
OCPBUGS-11559: multus-admission-controller should not run as root under Hypershift #1777
Bug OCPBUGS-4896: Kuryr: If set use MTU from Config for svc net #1671
OCPBUGS-10977: HyperShift: Add POD_NAME env to ovnkube-node #1753
OCPBUGS-11461: Split out konnectivity certs #1771
OCPBUGS-11178: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1759
OCPBUGS-11059: Fix info log formatting #1659
Full changelog

cluster-node-tuning-operator

Fix a race in e2e test rollback.go code (#742) #742
pao: e2e: Make script executable (#734) #734
pao e2e: Split gcp-pao lane (#728) #728
Do not rollback settings on TuneD exit (#711) #711
OCPBUGS-15800: e2e: latency testing: increase the expected threshold and fix gomega truncating output (#710) #710
Revert “Remove optimization to allow full resync (#569)” (#688) #569
update owners 20230109 (#549) #549
Add PerformanceProfiles to ‘oc adm must-gather’ (#667) #667
OCPBUGS-14472: Fix updating numa core siblings map in GetCpuSiblings function (#675) #675
Remove trailing spaces from test names (#572) #572
Remove optimization to allow full resync (#569) #569
e2e:latency: count LATENCY_TEST_DELAY in timeout (#539) #539
e2e: add missing test id (#630) #630
Remove subPaths, they are broken (#627) #627
Remove the preStop hook for openshift-tuned (#621) #621
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-13346: dont log jwt tokens #543
Full changelog

cluster-policy-controller

OCPBUGS-12442: psalabelsyncer: handle empty namespace of a rolebinding subject #111
OCPBUGS-14092: [4.12] fix ClusterResourceQuotas to work for all api resources including custom resources #117
OCPBUGS-13889: external template and route Informer #114
Full changelog

cluster-samples-operator

OCPBUGS-15757: Update Jenkins and Jenkins Agent Base image versions #506
Full changelog

cluster-storage-operator

OCPBUGS-14307: User real node name in failing mount alerts #377
OCPBUGS-13719: assets: csi: hypershift: add pull-secret to aws-ebs-csi-driver-operator ServiceAccount #370
OCPBUGS-10646: Hypershift: set control plane operand properties #355
Full changelog

cluster-version-operator

OCPBUGS-14096: Trigger new sync round on ClusterOperator Available changes #938
OCPBUGS-12182: Update dnsPolicy to allow consistent resolution of the internal LB #931
OCPBUGS-10565: RetrievePayload: Improve timeouts and cover behavior with tests #914
Full changelog

console

OCPBUGS-16660: Manual cherry-pick of #12978 #13039
OCPBUGS-17192: “Duplicate RoleBinding” leads to “Unsupported value” error #13063
OCPBUGS-16846: Fix stop PLR option #13051
OCPBUGS-2182: re-enable operator-install-single-namespace.spec.ts test #13013
OCPBUGS-16732: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13047
OCPBUGS-16046, OCPBUGS-16047, OCPBUGS-16048: Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12997
OCPBUGS-15898: account for single object in status.conditions instead… #12982
OCPBUGS-16139: The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #13004
OCPBUGS-15710: Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12962
OCPBUGS-15849: Add Pipeline metrics unsupported empty page #12977
OCPBUGS-9405: [OSD] There is no error message shown on node label edi… #12965
OCPBUGS-15798: Remove access review check for PipelineResource from Pipeline section #12969
OCPBUGS-13643: Fix OLM k8sResourcePrefix descriptor dropdown behavior #12813
OCPBUGS-15569: use service port name instead targetPort in the Pipeline Event listener route #12958
OCPBUGS-15535: Delete annotation ‘tekton.dev/v1beta1TaskRuns’ when rerun the PLR #12955
OCPBUGS-15404: Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected #12935
OCPBUGS-15057: only copy workload annotations to debug pod #12903
OCPBUGS-15099: visiting Configurations page returns error Cannot read… #12906
OCPBUGS-15482: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore #12948
OCPBUGS-14190: When Creating Sample Devfile from the Samples Page, Topology Icon is not set #12859
OCPBUGS-11989: Modified git import flow module to handle create button enable-disable issue #12775
OCPBUGS-6848: Service name search ability while creating the Route from console #12505
OCPBUGS-7619: Search page: LazyActionMenus are shown below Add/Remove from navigation button #12575
OCPBUGS-7924: Developer - Topology : ‘Filter by resource’ drop-down i18n misses #12598
OCPBUGS-13803: add support for minimal status of tekton #12831
OCPBUGS-13750: use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12829
OCPBUGS-12839: Show type of sample on the samples view #12783
OCPBUGS-12992: Pipeline doesn’t render correctly when displayed but looks fine in edit mode #12791
OCPBUGS-9336: use buildconfig form also for create #12770
OCPBUGS-11601: Move operator install status to it’s own … #12715
OCPBUGS-12232: Fix for broken Create key/value secrets e2e tests #12750
OCPBUGS-11844: delete associated pipeline, triggertemplate and eventlistener when deleting app #12727
OCPBUGS-11972: update the default pipelineRun template name #12687
OCPBUGS-6888: Show Git icon and repo link as per the Git provider #12511
OCPBUGS-12476: Pipelines repository list and creation form doesn’t show Tech Preview status #12763
OCPBUGS-1753: Fix OLM descriptor components deletes operand e2e test failing #12573
OCPBUGS-12477: Users don’t know what type of resource is being created by Import from Git or Deploy Image flows #12765
OCPBUGS-11998: Do not show builder ImageStreams without sampleRepo as samples #12740
OCPBUGS-5009: Helm Charts and Samples are not disabled in topology actions if actions are disabled in customization #12382
OCPBUGS-7953: fix devfile error #12605
OCPBUGS-6672: In DeploymentConfig both the Form view and Yaml view are not in sync #12475
OCPBUGS-8016: PipelineRun templates must be fetched from OpenShift namespace #12614
OCPBUGS-10225: Get the Event type value from the latest PLR of the Repository #12643
OCPBUGS-7333: Add missing SDK extensions descriptions #12556
Full changelog

console-operator

OCPBUGS-13647: Proper cleanup of route sync conditions #762
OCPBUGS-7999: Distinguish between route conditions and remove the old ones #735
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-15971: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #198
OCPBUGS-11906: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #193
Full changelog

csi-livenessprobe

OCPBUGS-13821: Bump gRPC from 1.38.0 to 1.49.0 #43
Full changelog

docker-builder

OCPBUGS-17228: bump github.com/containers/buildah to v1.26.6 #325
OCPBUGS-15643: Add the git-lfs package #353
OCPBUGS-6753: manage-dockerfile: use the original form of HEALTHCHECK #324
Full changelog

etcd

OCPBUGS-15860: [4.12] Rebase openshift/etcd to 3.5.9 #207
Full changelog

gcp-machine-controllers

OCPBUGS-14120: Register control plane machines to instance group #52
Full changelog

haproxy-router

OCPBUGS-14454, OCPBUGS-14455: Handle mTLS CRLs, and fix accidental CRL duplication #491
Full changelog

hyperkube, pod

OCPBUGS-17188: Update to Kubernetes 1.25.12 #1669
OCPBUGS-17159: Increase service idle max timeout to 100 minutes #1662
OCPBUGS-8737: UPSTREAM: <drop>: bump apiserver-library-go for scc fix #1619
OCPBUGS-15309: Bump to k8s 1.25.11 #1615
OCPBUGS-14745: [release-4.12] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1600
OCPBUGS-13173: Bump to k8s 1.25.10 #1582
OCPBUGS-7589: UPSTREAM: <carry>: add default kubelet sysctls within rpm #1478
OCPBUGS-11166: UPSTREAM: <carry>: Force using the go tooling from the system #1531
OCPBUGS-11166: Bump to k8s 1.25.8 #1527
Full changelog

hypershift

fix(ignition): Add HCP label to ignition-server by default #2949
OCPBUGS-16847: use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2855
[release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount patch2 #2803
OCPBUGS-16411: fix deletion bug when hostedzone is already deleted #2835
Kas policy 4.12 #2826
Leader election config update. #2800
OCPBUGS-15614: Check OwningIngressController also in Labels #2759
OCPBUGS-16086: autoscaling balance similar groups #2806
HOSTEDCP-1060: refactor ignition-server reconcilation and add ignition-server proxy #2749
OCPBUGS-14873: Update vendored openshift API for 4.12 #2734
HOSTEDCP-1073: enforce blocked rollout of HCP #2745
properly handle user CA bundle not existing #2711
OCPBUGS-15304: [release-4.12] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2695
OCPBUGS-14873: Honor global ingress configuration LoadBalancer type on AWS #2678
OCPBUGS-14803: Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2667
[release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount #2512
OCPBUGS-14156: Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2614
OCPBUGS-14031: Include default ingress CA in root CA bundle #2600
OCPBUGS-13626: Sync proxy TrustedCA to guest cluster #2557
OCPBUGS-13639: Cherry pick aws endpoint sg #2579
OCPBUGS-12787: fix(hcco): Get OLM CatalogSource images from defined map #2485
ACM-5173 [backport 4.12] get pull secret instead of dockerconfigjson from mce credentials #2486
Configurable SRE MetricsSet #2545
OCPBUGS-13077: Ensure ingress controllers are removed before load balancers #2515
OCPBUGS-11544: Pass runAsUser to CNO so it can run its managed services with proper security context #2391
OCPBUGS-12845: Delete kubeadmin secret when an idp is defined #2492
OCPBUGS-12738: Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO #2473
OCPBUGS-12199: remove ACL for aws bucket #2458
OCPBUGS-11607: properly reconcile with user specified changes for in proxy configuration #2395
OCPBUGS-11726: Update HostedCluster oauthCallbackURLTemplate #2410
e2e: Cleanup shared OIDC provider on SIGTERM #2449
HOSTEDCP-568: Update Konnectiviy socks5 proxy for IBM exception #2406
OCPBUGS-10584: Switch NTO metrics auth to certs generated by HCP controller #2293
OCPBUGS-11014: Do not proxy when guest cluster resolution fails #2340
OCPBUGS-11654: [release-4.12] Create new EC2 client for AWS identity provider health check #2403
OCPBUGS-10646: Add storage operators perms. to watch HostedControlPlane #2306
HOSTEDCP-939: [release-4.12] Setup shared OIDC provider for e2e clusters #2365
HOSTEDCP-806: Fix ValidAWSKMSConfig condition #2362
OCPBUGS-11056: fix external APIServer address selection based on endpointAccess #2350
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2351
SDA-8707: No more specifying the scrape interval at servicemonitors & podmonitors level #2356
HOSTEDCP-900: Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field #2285
OCPBUGS-10504: Deletion of the VPCEnpoint on conflicting service names #2310
Full changelog

insights-operator

OCPBUGS-15031: fix the config serialization & add test (#794) (#800) #794
OCPBUGS-15459: gather PDBs only from openshift namespaces (#804) #804
OCPBUGS-15414: extend configmap gatherer to get gateway-mode-config (#788) (#791) (#801) #788
OCPBUGS-7871: Collect info about monitoring pods pv (#769) #769
OCPBUGS-11008: update the cluster transfer interval to 12h (#765) #765
OCPBUGS-10531: service_accounts.go Marshal fix (#754) #754
Full changelog

ironic

OCPBUGS-17642: Expand regex for fcos/okd packages list #392
OCPBUGS-16169: allow inspector to also be proxied #385
OCPBUGS-13586: Add python-flask dependency #373
Bug OCPBUGS-13335: Bump ironic version to include fix to OCPBUGS-13335. #367
OCPBUGS-13041: Bump python-sushy #363
OCPBUGS-7566: Bump werkzeug 4.12 #352
Full changelog

ironic-agent

“Bug OCPBUGS-15831: Switch to udevadm command install instead of package” #82
OCPBUGS-9934: Adding dep on python3-werkzeug >= 2.0.3-4 #72
Full changelog

ironic-machine-os-downloader

OCPBUGS-15735: Binary should be compiled on rhel9 #92
Full changelog

ironic-static-ip-manager

OCPBUGS-14415: Flush addresses on provisioning interface with global scope only #37
Full changelog

kube-proxy, sdn

OCPBUGS-13785: EgressNetworkPolicy DNS resolution does not fall back to TCP #542
OCPBUGS-14304: fix possible concurrent map read/write #551
OCPBUGS-13058: save and delete the old egress network policy #539
OCPBUGS-13761: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) #541
Full changelog

kube-rbac-proxy

OCPBUGS-11645: Updating kube-rbac-proxy images to be consistent with ART #56
Full changelog

kuryr-cni, kuryr-controller

OCPBUGS-15493: Remove unneeded grpcio dependencies from RPM #737
OCPBUGS-13778: KuryrPort cleanup: Fix issue of subport not found #731
Bug OCPBUGS-12164: Fix ValueError when Pod has no IP address #722
OCPBUGS-11993: Fix VIF revert on KuryrPort status update error #721
Full changelog

machine-api-operator

OCPBUGS-10943: Fix empty component version #1132
Full changelog

machine-config-operator

OCPBUGS-17862: Agent-based install process the container machine-config-controller will be oom #3875
OCPBUGS-17461: The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3844
OCPBUGS-15570: configure-ovs: support UUID in vlan.parent #3768
OCPBUGS-16754: daemon: Don’t traverse /run/ostree/auth.json symlink #3818
OCPBUGS-11303: Fix regex dot in coredns config file #3660
OCPBUGS-13757: The MCD has a non-functional pivot command that should be removed #3710
OCPBUGS-7718: Prevent possible split-brain scenario with keepalived unicast #3562
OCPBUGS-7945: [release-4.12] Forklift most of resolv-prepender dispatcher script to systemd #3573
OCPBUGS-5935: Wrap podman commands in a while loop #3495
Full changelog

multus-admission-controller

Updating ose-multus-admission-controller images to be consistent with ART #61
Full changelog

multus-cni

OCPBUGS-7844: Fix multus to support CNI plugin which does not create interface [backport 4.12] #164
Full changelog

multus-route-override-cni

Updating ose-multus-route-override-cni images to be consistent with ART #27
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-5953: Denormalize IP name before checking if pod is alive [Backport 4.12] #178
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #134
OCPBUGS-8673: Dual stack support #131
OCPBUGS-7429: Invalid ipv6 backport 4.12 #109
OCPBUGS-11321: respect requested allocation range when exluding ranges [Backport 4.12] #123
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #93
Full changelog

network-interface-bond-cni

OCPBUGS-13836: Ignore missing links during delete command #53
Full changelog

network-metrics-daemon

Revert “Remove e2e tests that consistently fail in 4.12 (#74)” (#77) #74
Remove e2e tests that consistently fail in 4.12 (#74) #74
Full changelog

oauth-server

OCPBUGS-13906: don’t log request query and fragment on failed authn request #129
OCPBUGS-12757: bump lib-go for group cache fix, kube 1.24->1.25 #127
Full changelog

oc-mirror

OCPBUGS-14065: Fix destination image reference (#650) #650
OCPBUGS-11908: Fix (#607) (#641) #607
OCPBUGS-14065: fix: Limit the nested repository path while mirroring the images (#642) #642
updates the OWNERS file (#646) #646
OCPBUGS-12261: fix: skips bundles with ‘skips’ field on head bundle (#618) #618
OCPBUGS-863: Add skip pruning flag and logic (#591) #591
Bugfix for destination registry nested paths length (#590) #590
Full changelog

openstack-machine-api-provider

OCPBUGS-10607: Use TenantID if ProjectID is empty #66
Full changelog

operator-lifecycle-manager, operator-registry

Introduce DOWNSTREAM_OWNERS file #541
Allow cpb to be statically compiled / exempt from FIPS compliance #512
OCPBUGS-15858: fix dynamic conversion webhook #503
OCPBUGS-15737: Re-enable psa plugin #500
Full changelog

operator-marketplace

OCPBUGS-14109: Revert default catsrc diff changes #519
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-18058: [release-4.12] Create egress firewall with one db transaction #1835
OCPBUGS-17675: Don’t return error on delete event that doesn’t ave a chance to succeed. #1814
OCPBUGS-17522: [release-4.12] libovsdb: give monitor setup time to process than normal transactions #1808
OCPBUGS-16336: Backport support AllocateLoadBalancerNodePortsFalse #1766
OCPBUGS-15593: ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1730
OCPBUGS-15719: [relase-4.12] Fix egressFirewall create error handling #1746
OCPBUGS-13744: Improve syncNodes to remove stale data #1732
OCPBUGS-13885: [release-4.12] Drop packets that were not properly SNATed #1679
OCPBUGS-15388: Fix stale SNAT entries for completed pods #1723
OCPBUGS-15709: [release-4.12] Remove non-existing functions test. #1739
OCPBUGS-15424: [release-4.12] Fix network policy to work with long namespace names #1725
OCPBUGS-14982: Validate port before deleting conntrack flow #1713
OCPBUGS-14041: Fix bug that resulted in routes not be restored to a new vnic #1681
OCPBUGS-13953: [release-4.12] Use loadbalancer.Name as client index #1680
OCPBUGS-13599: Call SyncEndpoints from AddService #1673
OCPBUGS-7439: [release-4.12]: Egress Service: Fix nodeSelector parsing #1529
OCPBUGS-12768: : [release-4.12] Delete equivalent ACLs when searching by predicate. #1661
OCPBUGS-12265: [release-4.12] Network scale metrics #1653
OCPBUGS-8226: fix hybridOverlay DRIP in ICNIv1 pods #1633
OCPBUGS-11701: [release-4.12] CARRY: use “prefer local” for annotated services #1638
OCPBUGS-11109: [release-4.12] Batch potentially big transaction on egress firewall ACLs migration #1617
OCPBUGS-10947: [release-4.12] Egress firewall fix retry #1610
OCPBUGS-10314: [release-4.12] Handle Completed pods deletion #1581
Full changelog

route-controller-manager

OCPBUGS-14275: Bump k8s to 1.25.10 #27
Full changelog

tests

OCPBUGS-16696: Wait for DNS DS pods to be ready #28083
OCPBUGS-16243: allow cluster-config-operator to manage featuregate upgrade block #28055
OCPBUGS-15933: remove references to registry.centos.org #28033
CCO-367: Allow CCO to be Upgradeable=False when credentialsMode=Manual #27941
OCPBUGS-14152: Move from registry.centos.org to quay.io #27949
OCPBUGS-12914: Add (optional) dual-stack tests to the CNI certification test suite #27903
Updating openshift-enterprise-tests images to be consistent with ART #27293
add specific test for failing cgroups path #27856
Full changelog

thanos

OCPBUGS-4276: Update exporter-toolkit to 0.7.3 #111
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-14312: Update 4.12 against v2.7.1 #81
Full changelog

vsphere-csi-driver-operator

OCPBUGS-12712: Add backoff for successful storage policy creations #152
Full changelog

vsphere-problem-detector

OCPBUGS-10812: Add build number to metrics #104
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github